devservices.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:9d:bf:5b:19:df:97:ce:05:2f:17:31:00:3d:2c:78:d0 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=devservices.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:9d:bf:5b:19:df:97:ce:05:2f:17:31:00:3d:2c:78:d0
Serial Number (int): 269713316973170651680166297323829596027088
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:48:f4:31:46:21:42:1c:18:46:1c:fb:74:8f:1b:c4:8b:94:39:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:f3:8d:97:66:2f:3f:ad:98:b5:12:9b:09:2a:d0:8d:0c:ca:90:41
Fingerprint (sha256): 9c:8e:71:9b:f2:1d:3f:cc:f0:ff:3d:a5:88:a2:08:15:9e:6d:91:bd:b4:3c:b6:d9:e8:16:6b:52:f6:34:2b:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate devservices.com.br

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devservices.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.devservices.com.br
arquivofacil.devservices.com.br
barbearia79.devservices.com.br
chamados.devservices.com.br
devservices.com.br
pontofacil.devservices.com.br
sistemas.devservices.com.br
update.devservices.com.br
www.devservices.com.br

Other certificates including the domain name devservices.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for devservices.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG8DCCBdigAwIBAgISAxidv1sZ35fOBS8XMQA9LHjQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMTYwMDE1NDJaFw0x
ODA0MTYwMDE1NDJaMB0xGzAZBgNVBAMTEmRldnNlcnZpY2VzLmNvbS5icjCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL3u2IUZvo0UH3U0s9llrf0OvCcf
O7mgpFj43p+C/b91haRjlAl7HjtOAJ+JvSAhbZ8dmuV8PNZT9ulrzhsw3lbV7/Ba
G10Yq/P/ZJeJidNlbfUSM3jClJwAUzaZZfXpty2z7omqeTx48mMKLOkS5Tse6nlk
4KUMaVpG2G+JEak+qD/mvnlV1gBSEwEQj6qMnWI2gc2YlOIKoLFDn5hRmX+lt6bD
mjJWhJROgzOFVsfQVwCvtfWgqACVsXu2Uar5+HC0/zfD35KnAPNWuLhS6JKC1P1j
Utlstybu7FabwQfbnDE5xx6O6NpF0IlPUMfHisBlLrLBsGwDWdd9vcOPGTBoBDoT
cbFvNqgC81orHMFj5TQpnkNCH4pUpeq5447IHNguQ5fbqwpmShUSpAobPE1Yeo+8
dqWfP/AxCMP9h9XOVNZyOhcq9RzXzz/Rvf8GvElo/8xMZUD1vDkaOWkaE+W956vX
/ys83U+i/skR9HtrbsHAb6/cJmhxAV97pXxoQtjLWPm3N2psYZqD53avQQaiCURm
Wc8zLA+idt3m9PIbyoOxoLSCtagU13dW8rsIHCX/M795MxzMawUNSijdaMX9w7Zr
Af44pzoWwS6fvilf14Z0sGfFwicDsbI0Q/R1ibZNfUeO/oWLVgmpstzYA4lbcEEG
v5WqGSeJlz7TeY/HAgMBAAGjggL7MIIC9zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FHhI9DFGIUIcGEYc+3SPG8SLlDmeMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggEEBgNVHREEgfwwgfmCFmFwaS5kZXZz
ZXJ2aWNlcy5jb20uYnKCH2FycXVpdm9mYWNpbC5kZXZzZXJ2aWNlcy5jb20uYnKC
HmJhcmJlYXJpYTc5LmRldnNlcnZpY2VzLmNvbS5icoIbY2hhbWFkb3MuZGV2c2Vy
dmljZXMuY29tLmJyghJkZXZzZXJ2aWNlcy5jb20uYnKCHXBvbnRvZmFjaWwuZGV2
c2VydmljZXMuY29tLmJyghtzaXN0ZW1hcy5kZXZzZXJ2aWNlcy5jb20uYnKCGXVw
ZGF0ZS5kZXZzZXJ2aWNlcy5jb20uYnKCFnd3dy5kZXZzZXJ2aWNlcy5jb20uYnIw
gf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIw
gZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5
IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhl
IENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0
Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAb8+C2MXDyjT+myQO
Y3utoDz6uSi7Rt2TLOZQTKEOB4ZY1iXJ0vFxGHaS4MbEFTXzppGypvHkI0Y9wlim
sV3gacrGWdFJJN7uLnUhQwnBRJD28IXRTvRHtNASo5nPmNfI+O9x3SmvjKl0artF
vsTZQ+JZFe3eBDBAeTcjcPtpUJotXor4HJziVGToVVAPNRInmE8KqksQgnwhas+9
rIjQC+8KnE7swWuE8MsZfWHwBCLtMDK6Sgy1TC2r/qOIfcBt2GIRGT1eXkNwk78f
nEtTyXrVlvUEcmO8qnpwSC/0GC/mLMLUgIO3r9GYSxfYT+Pk7F+6Zhrf3sCbqrpT
S0gxAQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269713316973170651680166297323829596027088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-16 00:15:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-16 00:15:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devservices.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774859001408297301391746424222921480332194048054560820246016309461348026336080437485832077585193330602531740824620607234026032942185742339863813243005282238050138013503300430821092215194946306735133449725337204549076587548099689361810363990136629307418999314560136519846029242210161155299928393182758508335735690852615979920463091220658475389250182804994370453769640944352892068316956391062808912492042482569403732839519229616294379941532745948335469856693772177017491161609072871094766802839343352121138812611046443431426268255130975517974936632288821255315007150317184809666272678454795743304626121728129999087516709788675779621907662094922863272739886073254347736533368699819579066378450347983818011370624183193749093670246664794504853065761962981341017657187267224225194436944319645108784138695978808751730179355329271779199808974512727942114317791371388030293407708715537562475614449837296865395969514297387097667755192424580851451673085394876950052809073314600027813324868142797873463150846239909210730493221374382491051689165255896096164727348351016895728433157537621328398597795539543189306136437858809988032768390102493474947878346279318012604938840166422965307764571354279754612258422274388553818580612453159817335459647431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7848f4314621421c18461cfb748f1bc48b94399e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arquivofacil.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbearia79.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamados.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pontofacil.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemas.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.devservices.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devservices.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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